@openclaw/signal 2026.9.2 → 2026.9.4

package/dist/api.js

@@ -1,13 +1,13 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-BcDiypLn.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-B-A_5_Vz.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-D7Slr0-A.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
-import { t as probeSignal } from "./probe-CtO2EIfg.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, s as signalMessageActions, t as detectSignalTransport, u as markdownToSignalText } from "./transport-detection-Do2pYMAH.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { a as normalizeSignalAccountInput, d as probeSignalTransport, f as writeSignalAccountTransport, l as signalSetupContract, n as createSignalPluginBase, p as resolveSignalOutboundTarget, r as signalSetupWizard, t as signalPlugin, u as prepareSignalManagedNativeTransport } from "./channel-CyQvEuyA.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-BiNWxMB3.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
+import { t as probeSignal } from "./probe-kOJqyjWz.js";
 //#region extensions/signal/src/channel.setup.ts
 const signalSetupPlugin = { ...createSignalPluginBase({
 	setupWizard: signalSetupWizard,

package/dist/{approval-handler.runtime-Dsg_GE8N.js → approval-handler.runtime-DCPJkIqo.js}

@@ -1,8 +1,8 @@
 import { r as resolveDefaultSignalAccountId } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget } from "./approval-auth-pNCKKotV.js";
-import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-D-nkbsvm.js";
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { a as registerSignalApprovalReactionTarget, c as resolveSignalApprovalTargetAuthorKeys, l as unregisterSignalApprovalReactionTarget, r as hasSignalApprovalReactionApprovers, s as resolveSignalApprovalConversationKey } from "./approval-reactions-CjhdkJ8P.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { buildChannelApprovalNativeTargetKey } from "openclaw/plugin-sdk/approval-native-runtime";

package/dist/{approval-reactions-D-nkbsvm.js → approval-reactions-CjhdkJ8P.js}

@@ -1,14 +1,13 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget, i as resolveSignalDeliveredConversationKey, n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
 import { l as looksLikeUuid } from "./identity-YXPmgFMu.js";
-import { i as getOptionalSignalRuntime } from "./transport-detection-BcDiypLn.js";
+import { i as getOptionalSignalRuntime } from "./transport-detection-Do2pYMAH.js";
 import { createLazyRuntimeSurface } from "openclaw/plugin-sdk/lazy-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionDecisionList, resolveTypedApprovalReactionTarget } from "openclaw/plugin-sdk/approval-reaction-runtime";
+import { addApprovalReactionHintToText, createApprovalReactionTargetStore, hasApprovalReactionHintText, listApprovalReactionBindings, readApprovalReactionTargetRecord, resolveTypedApprovalReactionTarget, settleApprovalReaction } from "openclaw/plugin-sdk/approval-reaction-runtime";
 import { normalizeE164 } from "openclaw/plugin-sdk/text-utility-runtime";
-import { isApprovalNotFoundError } from "openclaw/plugin-sdk/error-runtime";
 import { getExecApprovalReplyMetadata } from "openclaw/plugin-sdk/approval-reply-runtime";
 import { createPluginStateErrorReporter } from "openclaw/plugin-sdk/plugin-state-runtime";
 import { matchesApprovalRequestFilters } from "openclaw/plugin-sdk/approval-client-runtime";
@@ -165,10 +164,9 @@ function buildReactionTargetKey(params) {
 	return `${accountId}:${conversationKey}:${messageId}`;
 }
 function readPersistedTarget(target) {
+	const record = readApprovalReactionTargetRecord(target);
 	const value = target;
-	if (!value || typeof value.approvalId !== "string" || value.approvalKind !== "exec" && value.approvalKind !== "plugin" || !value.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
-	const allowedDecisions = readApprovalReactionDecisionList(value.allowedDecisions);
-	if (!allowedDecisions) return null;
+	if (!record || !value?.route || value.route.deliveryMode !== "session" && value.route.deliveryMode !== "target" || !Array.isArray(value.targetAuthorKeys)) return null;
 	const targetRouteTo = value.route.deliveryMode === "target" && typeof value.route.to === "string" ? normalizeSignalMessagingTarget(value.route.to) : null;
 	if (value.route.deliveryMode === "target" && !targetRouteTo) return null;
 	const route = value.route.deliveryMode === "target" ? {
@@ -183,9 +181,7 @@ function readPersistedTarget(target) {
 		...typeof value.route.sessionKey === "string" ? { sessionKey: value.route.sessionKey } : {}
 	};
 	return {
-		approvalId: value.approvalId,
-		approvalKind: value.approvalKind,
-		allowedDecisions,
+		...record,
 		targetAuthorKeys: value.targetAuthorKeys,
 		route
 	};
@@ -359,26 +355,8 @@ async function maybeResolveSignalApprovalReaction(params) {
 		params.logVerboseMessage?.(`signal: approval reaction ignored for ${target.approvalId}; missing actor identity`);
 		return true;
 	}
-	if (getSignalApprovalApprovers({
-		cfg: params.cfg,
-		accountId: params.accountId
-	}).length === 0) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId}; reactions require explicit approvers`);
-		return true;
-	}
-	if (!signalApprovalAuth.authorizeActorAction({
-		cfg: params.cfg,
-		accountId: params.accountId,
-		senderId: actorId,
-		action: "approve",
-		approvalKind: target.approvalKind
-	}).authorized) {
-		params.logVerboseMessage?.(`signal: approval reaction denied id=${target.approvalId} sender=${actorId}`);
-		return true;
-	}
-	const resolveApprovalOverGateway = await loadResolveApprovalOverGateway();
-	try {
-		const result = await resolveApprovalOverGateway({
+	await settleApprovalReaction({
+		request: {
 			cfg: params.cfg,
 			approvalId: target.approvalId,
 			approvalKind: target.approvalKind,
@@ -387,32 +365,25 @@ async function maybeResolveSignalApprovalReaction(params) {
 			accountId: params.accountId,
 			senderId: actorId,
 			gatewayUrl: params.gatewayUrl
-		});
-		const terminalTruth = formatSignalApprovalTerminalTruth(result.approval);
-		unregisterSignalApprovalReactionTarget({
+		},
+		approvers: getSignalApprovalApprovers({
+			cfg: params.cfg,
+			accountId: params.accountId
+		}),
+		authorizeActorAction: (input) => signalApprovalAuth.authorizeActorAction(input),
+		loadResolver: loadResolveApprovalOverGateway,
+		clearTarget: () => unregisterSignalApprovalReactionTarget({
 			accountId: params.accountId,
 			conversationKey: params.conversationKey,
 			messageId: params.messageId
-		});
-		if (!result.applied) {
-			params.logVerboseMessage?.(`signal: approval reaction already resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction resolved id=${target.approvalId} sender=${actorId} ${terminalTruth}`);
-		return true;
-	} catch (error) {
-		if (isApprovalNotFoundError(error)) {
-			unregisterSignalApprovalReactionTarget({
-				accountId: params.accountId,
-				conversationKey: params.conversationKey,
-				messageId: params.messageId
-			});
-			params.logVerboseMessage?.(`signal: approval reaction ignored for expired approval id=${target.approvalId} sender=${actorId}`);
-			return true;
-		}
-		params.logVerboseMessage?.(`signal: approval reaction failed id=${target.approvalId} sender=${actorId}: ${String(error)}`);
-		throw error;
-	}
+		}),
+		onResolved: (result) => {
+			const outcome = result.applied ? "resolved" : "already resolved";
+			params.logVerboseMessage?.(`signal: approval reaction ${outcome} id=${target.approvalId} sender=${actorId} ${formatSignalApprovalTerminalTruth(result.approval)}`);
+		},
+		logVerboseMessage: params.logVerboseMessage
+	});
+	return true;
 }
 function clearSignalApprovalReactionTargetsForTest() {
 	signalApprovalReactionTargets.clearForTest();

package/dist/{channel-B-A_5_Vz.js → channel-CyQvEuyA.js}

@@ -3,9 +3,9 @@ import { a as resolveSignalAccountConfig, i as resolveSignalAccount, n as listSi
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { a as resolveSignalTarget, r as listSignalAliasDirectoryEntries } from "./approval-auth-pNCKKotV.js";
 import { c as resolveSignalSender, l as looksLikeUuid, o as resolveSignalPeerId, s as resolveSignalRecipient } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
-import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-C18u1hW0.js";
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { c as resolveSignalReactionLevel, d as markdownToSignalTextChunks, l as formatSignalMediaText, m as signalApprovalCapability, o as materializeSignalPresentationFallback, p as shouldSuppressLocalSignalExecApprovalPrompt, r as resolveSignalReplyContextWithPersistence, s as signalMessageActions, t as detectSignalTransport } from "./transport-detection-Do2pYMAH.js";
+import { i as migrateLegacySignalTransportConfig, n as normalizeCompatibilityConfig, r as clearLegacySignalTransportFieldsForAccount } from "./doctor-contract-api-D0SnglP4.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 import { describeAccountSnapshot, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { buildDmGroupAccountAllowlistAdapter } from "openclaw/plugin-sdk/allowlist-config-edit";
@@ -28,7 +28,8 @@ import { createChannelPluginBase, getChatChannelMeta } from "openclaw/plugin-sdk
 import { parseAllowFromEntries } from "openclaw/plugin-sdk/allow-from";
 import { createChannelDmPolicy } from "openclaw/plugin-sdk/channel-dm-policy";
 import { defineChannelSetupContract } from "openclaw/plugin-sdk/channel-setup";
-import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2, createCliPathTextInput, createDelegatedSetupWizardProxy, createDelegatedTextInputShouldPrompt, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator, patchChannelConfigForAccount, promptParsedAllowFromForAccount, setAccountAllowFromForChannel, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup-runtime";
+import { patchTopLevelChannelConfigSection } from "openclaw/plugin-sdk/setup";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$2, createCliPathTextInput, createDelegatedSetupWizardProxy, createDelegatedTextInputShouldPrompt, createPatchedAccountSetupAdapter, createSetupInputPresenceValidator, createSetupTranslator as createSetupTranslator$1, patchChannelConfigForAccount, promptParsedAllowFromForAccount, setAccountAllowFromForChannel, setSetupChannelEnabled as setSetupChannelEnabled$1 } from "openclaw/plugin-sdk/setup-runtime";
 import { formatCliCommand, formatDocsLink } from "openclaw/plugin-sdk/setup-tools";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
 import { createRestrictSendersChannelSecurity } from "openclaw/plugin-sdk/channel-policy";
@@ -214,8 +215,8 @@ async function probeSignalTransport(params) {
 		overrides: managedTransportOptions(params.transport)
 	}) : params.transport;
 	const resolved = resolveSignalTransport(transport);
-	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
-	return (params.probeNative ?? (await import("./transport-probes.runtime-B7kr_6Zu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
+	if (resolved.kind === "container") return (params.probeContainer ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).containerCheck)(resolved.baseUrl, timeoutMs, params.account);
+	return (params.probeNative ?? (await import("./transport-probes.runtime-DV7x4VWu.js")).nativeCheck)(resolved.baseUrl, timeoutMs);
 }
 function writeSignalAccountTransport(params) {
 	const transport = normalizeTransport(params.transport);
@@ -247,7 +248,7 @@ function writeSignalAccountTransport(params) {
 }
 //#endregion
 //#region extensions/signal/src/setup-core.ts
-const t = createSetupTranslator();
+const t = createSetupTranslator$1();
 const channel = "signal";
 const signalSetupFields = {
 	signalNumber: {
@@ -484,17 +485,14 @@ function restorePromotedSignalDefaultAccount(cfg) {
 	const accounts = { ...signal.accounts };
 	if (Object.keys(remainingDefault).length === 0) delete accounts[DEFAULT_ACCOUNT_ID$2];
 	else accounts[DEFAULT_ACCOUNT_ID$2] = remainingDefault;
-	return {
-		...cfg,
-		channels: {
-			...cfg.channels,
-			signal: {
-				...signal,
-				account,
-				accounts
-			}
+	return patchTopLevelChannelConfigSection({
+		cfg,
+		channel,
+		patch: {
+			account,
+			accounts
 		}
-	};
+	});
 }
 const signalSetupAdapter = {
 	...signalSetupAdapterBase,
@@ -564,7 +562,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 		})), signalNumberTextInput],
 		completionNote: signalCompletionNote,
 		dmPolicy: signalDmPolicy,
-		disable: (cfg) => setSetupChannelEnabled(cfg, channel, false)
+		disable: (cfg) => setSetupChannelEnabled$1(cfg, channel, false)
 	});
 }
 //#endregion
@@ -572,7 +570,7 @@ function createSignalSetupWizardProxy(loadWizard) {
 const signalDoctor = {
 	normalizeCompatibilityConfig,
 	cleanStaleConfig: async ({ cfg }) => {
-		const { detectSignalTransport } = await import("./transport-detection.runtime-DYuvIa7s.js");
+		const { detectSignalTransport } = await import("./transport-detection.runtime-QasZp3BE.js");
 		return await migrateLegacySignalTransportConfig({
 			cfg,
 			detect: detectSignalTransport
@@ -583,7 +581,7 @@ const signalDoctor = {
 //#region extensions/signal/src/shared.ts
 const SIGNAL_CHANNEL = "signal";
 async function loadSignalChannelRuntime() {
-	return await import("./channel.runtime-LfE0qPMj.js");
+	return await import("./channel.runtime--koF_1H0.js");
 }
 const signalSetupWizard = createSignalSetupWizardProxy(async () => (await loadSignalChannelRuntime()).signalSetupWizard);
 const signalConfigAdapter = {
@@ -671,10 +669,10 @@ function createSignalPluginBase(params) {
 }
 //#endregion
 //#region extensions/signal/src/channel.ts
-const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-D7Slr0-A.js").then((n) => n.n));
-const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-CtO2EIfg.js").then((n) => n.n));
-const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-BLiqhyHW.js"));
-const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-D-nkbsvm.js").then((n) => n.n));
+const loadSignalMonitorModule = createLazyRuntimeModule(() => import("./monitor-BiNWxMB3.js").then((n) => n.n));
+const loadSignalProbeModule = createLazyRuntimeModule(() => import("./probe-kOJqyjWz.js").then((n) => n.n));
+const loadSignalSendRuntime = createLazyRuntimeModule(() => import("./send.runtime-CeV1p7Sq.js"));
+const loadSignalApprovalReactionsModule = createLazyRuntimeModule(() => import("./approval-reactions-CjhdkJ8P.js").then((n) => n.n));
 async function resolveSignalSendContext(params) {
 	return {
 		send: resolveOutboundSendDep(params.deps, "signal") ?? (await loadSignalSendRuntime()).sendMessageSignal,
@@ -902,7 +900,7 @@ async function registerDeliveredSignalApprovalPayloadForReactions(params) {
 	const targetAuthor = normalizeOptionalString(account.config.account);
 	const targetAuthorUuid = normalizeOptionalString(account.config.accountUuid);
 	if (!targetAuthor && !targetAuthorUuid) return;
-	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-CsVOpHg_.js").then((n) => n.n);
+	const { registerSignalQuestionReactionTargetForDeliveredPayload } = await import("./question-reactions-BFR9Mf-O.js").then((n) => n.n);
 	registerSignalQuestionReactionTargetForDeliveredPayload({
 		cfg: params.cfg,
 		target: {
@@ -1093,8 +1091,11 @@ const signalPlugin = createChatChannelPlugin({
 		idLabel: "signalNumber",
 		message: PAIRING_APPROVED_MESSAGE,
 		normalizeAllowEntry: createPairingPrefixStripper(/^signal:/i),
-		notify: async ({ cfg, id, message }) => {
-			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, { cfg });
+		notify: async ({ cfg, id, message, accountId }) => {
+			await (await loadSignalSendRuntime()).sendMessageSignal(id, message, {
+				cfg,
+				accountId
+			});
 		}
 	} },
 	security: signalSecurityAdapter,

package/dist/channel-config-api.js

@@ -1,2 +1,2 @@
-import { t as SignalChannelConfigSchema } from "./config-schema-CHihQTOp.js";
+import { t as SignalChannelConfigSchema } from "./config-schema-DfEbpMVQ.js";
 export { SignalChannelConfigSchema };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as signalPlugin } from "./channel-B-A_5_Vz.js";
+import { t as signalPlugin } from "./channel-CyQvEuyA.js";
 export { signalPlugin };

package/dist/{channel.runtime-LfE0qPMj.js → channel.runtime--koF_1H0.js}

@@ -1,8 +1,8 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds } from "./accounts-DO4HMqaK.js";
-import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-B-A_5_Vz.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
+import { c as signalNumberTextInput, i as createSignalCliPathTextInput, o as signalCompletionNote, s as signalDmPolicy } from "./channel-CyQvEuyA.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
 import { createDetectedBinaryStatus, createSetupTranslator, setSetupChannelEnabled } from "openclaw/plugin-sdk/setup";
+import { detectBinary } from "openclaw/plugin-sdk/setup-tools";
 //#region extensions/signal/src/setup-surface.ts
 const t = createSetupTranslator();
 const channel = "signal";

package/dist/{client-BmpTN7R3.js → client-B3C0ciqU.js}

@@ -1,14 +1,19 @@
+import { createRequire } from "node:module";
 import { detectMime, extractOriginalFilename, parseMediaContentLength } from "openclaw/plugin-sdk/media-runtime";
 import { parseStrictNonNegativeInteger, resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { coerceErrorMessage, formatErrorMessage, toErrorObject } from "openclaw/plugin-sdk/error-runtime";
 import { resolveFetch } from "openclaw/plugin-sdk/fetch-runtime";
 import { readResponseTextPrefix, readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { readRegularFile } from "openclaw/plugin-sdk/security-runtime";
-import WebSocket from "ws";
+import path from "node:path";
 import { Buffer as Buffer$1 } from "node:buffer";
 import http from "node:http";
 import https from "node:https";
 import { generateSecureUuid } from "openclaw/plugin-sdk/core";
+//#region extensions/signal/src/ws-runtime.ts
+const require = createRequire(import.meta.url);
+const WebSocket = require(path.join(path.dirname(require.resolve("ws/package.json")), "index.js"));
+//#endregion
 //#region extensions/signal/src/client-container.ts
 /**
 * Signal client for bbernhard/signal-cli-rest-api container.

package/dist/{client-adapter-CDyW9LrQ.js → client-adapter-CNc5wzzs.js}

@@ -1,4 +1,4 @@
-import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-BmpTN7R3.js";
+import { a as containerCheck, i as streamSignalEvents$1, n as signalCheck$1, o as containerRpcRequest, r as signalRpcRequest$1, s as streamContainerEvents } from "./client-B3C0ciqU.js";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/client-adapter.ts
 /**

package/dist/{config-schema-CHihQTOp.js → config-schema-DfEbpMVQ.js}

@@ -1,7 +1,7 @@
 import { createChannelConfigUiHints } from "openclaw/plugin-sdk/channel-core";
 import { isRecord, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { DEFAULT_ACCOUNT_ID, normalizeAccountId, resolveAccountEntry } from "openclaw/plugin-sdk/account-resolution";
-import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, requireAllowlistAllowFrom, requireOpenAllowFrom } from "openclaw/plugin-sdk/channel-config-schema";
+import { ChannelDeliveryStreamingConfigSchema, ChannelSendReadReceiptsSchema, ExecutableTokenSchema, ReplyToModeSchema, buildChannelAccountSchemaParts, buildChannelConfigSchema, buildChannelReactionShape, buildGroupEntrySchema, refineChannelDmPolicy } from "openclaw/plugin-sdk/channel-config-schema";
 import { z } from "zod";
 //#region extensions/signal/src/config-ui-hints.ts
 const signalChannelConfigUiHints = {
@@ -142,45 +142,18 @@ const SignalConfigSchemaBase = SignalAccountSchemaBase.extend({
 	defaultAccount: z.string().optional()
 });
 function validateSignalConfigAllowFrom(value, ctx) {
-	requireOpenAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"open\" requires channels.signal.allowFrom to include \"*\""
-	});
-	requireAllowlistAllowFrom({
-		policy: value.dmPolicy,
-		allowFrom: value.allowFrom,
-		ctx,
-		path: ["allowFrom"],
-		message: "channels.signal.dmPolicy=\"allowlist\" requires channels.signal.allowFrom to contain at least one sender ID"
+	refineChannelDmPolicy({
+		channelId: "signal",
+		value,
+		ctx
 	});
 	for (const [accountId, account] of Object.entries(value.accounts ?? {})) {
 		if (!account) continue;
-		const effectivePolicy = account.dmPolicy ?? value.dmPolicy;
-		const effectiveAllowFrom = account.allowFrom ?? value.allowFrom;
-		requireOpenAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"open\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to include \"*\""
-		});
-		requireAllowlistAllowFrom({
-			policy: effectivePolicy,
-			allowFrom: effectiveAllowFrom,
-			ctx,
-			path: [
-				"accounts",
-				accountId,
-				"allowFrom"
-			],
-			message: "channels.signal.accounts.*.dmPolicy=\"allowlist\" requires channels.signal.accounts.*.allowFrom (or channels.signal.allowFrom) to contain at least one sender ID"
+		refineChannelDmPolicy({
+			channelId: "signal",
+			value,
+			accountId,
+			ctx
 		});
 	}
 }

package/dist/contract-api.js

@@ -1,4 +1,4 @@
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
 import { i as isSignalSenderAllowed } from "./identity-YXPmgFMu.js";
-import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-7tEL37_j.js";
+import { a as installSignalCliFromRelease, i as installSignalCli, n as downloadToFile, o as looksLikeArchive, r as extractSignalCliArchive, s as pickAsset, t as MAX_SIGNAL_CLI_EXTRACTED_BYTES } from "./install-signal-cli-QlEIfWBv.js";
 export { MAX_SIGNAL_CLI_EXTRACTED_BYTES, downloadToFile, extractSignalCliArchive, installSignalCli, installSignalCliFromRelease, isSignalSenderAllowed, looksLikeArchive, looksLikeSignalTargetId, normalizeSignalMessagingTarget, normalizeSignalReactionRecipient, pickAsset };

package/dist/{doctor-contract-api-C18u1hW0.js → doctor-contract-api-D0SnglP4.js}

@@ -293,76 +293,7 @@ function hasContainerTransportWithoutEffectiveAccount(cfg) {
 	}
 	return false;
 }
-async function migrateLegacySignalTransportConfig(params) {
-	const signal = params.cfg.channels?.signal;
-	if (!isRecord(signal)) return {
-		config: params.cfg,
-		changes: []
-	};
-	const accounts = isRecord(signal.accounts) ? signal.accounts : {};
-	if (!(Object.hasOwn(signal, "apiMode") || hasLegacyFields(signal) || Object.values(accounts).some((entry) => isRecord(entry) && hasLegacyFields(entry)))) return {
-		config: params.cfg,
-		changes: []
-	};
-	const apiMode = signal.apiMode;
-	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
-	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
-	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
-	if (invalidDerivedEndpoint) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [invalidDerivedEndpoint === "port" ? PENDING_LEGACY_INVALID_PORT_WARNING : PENDING_LEGACY_INVALID_HOST_WARNING]
-	};
-	if (hasInvalidLegacyHttpUrl(legacyResolutionEntries, signal)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
-	};
-	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
-		entry,
-		parent: signal,
-		apiMode,
-		detect: params.detect
-	})));
-	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_INVALID_PORT_WARNING]
-	};
-	const transports = allocateMigratedManagedPorts({
-		entries,
-		transports: resolvedTransports
-	});
-	if (transports.some((transport, index) => shouldMaterializeTransport(entries, index) && !transport)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
-	};
-	const next = applyMigratedSignalTransports({
-		cfg: params.cfg,
-		entries,
-		transports
-	});
-	if (!next) return {
-		config: params.cfg,
-		changes: []
-	};
-	if (hasContainerTransportWithoutEffectiveAccount(next)) return {
-		config: params.cfg,
-		changes: [],
-		warnings: [PENDING_LEGACY_CONTAINER_ACCOUNT_WARNING]
-	};
-	return {
-		config: next,
-		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
-	};
-}
-function migrateLegacySignalTransportConfigSync(cfg) {
+function prepareLegacySignalTransportMigration(cfg) {
 	const signal = cfg.channels?.signal;
 	if (!isRecord(signal)) return {
 		config: cfg,
@@ -373,6 +304,7 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		config: cfg,
 		changes: []
 	};
+	const apiMode = signal.apiMode;
 	const entries = [signal, ...Object.values(accounts).filter(isRecord)];
 	const legacyResolutionEntries = entries.filter((_, index) => shouldMaterializeTransport(entries, index)).filter((entry) => !isSignalTransportConfig(entry.transport));
 	const invalidDerivedEndpoint = findInvalidLegacyDerivedEndpoint(legacyResolutionEntries, signal);
@@ -386,14 +318,14 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: [],
 		warnings: [PENDING_LEGACY_INVALID_URL_WARNING]
 	};
-	const resolvedTransports = entries.map((entry, index) => {
-		if (!shouldMaterializeTransport(entries, index)) return;
-		return resolveLegacyTransportWithoutDetection({
-			entry,
-			parent: signal,
-			apiMode: signal.apiMode
-		});
-	});
+	return {
+		signal,
+		apiMode,
+		entries,
+		legacyResolutionEntries
+	};
+}
+function finishLegacySignalTransportMigration(cfg, entries, resolvedTransports) {
 	if (hasInvalidManagedTransportPort(resolvedTransports)) return {
 		config: cfg,
 		changes: [],
@@ -427,6 +359,36 @@ function migrateLegacySignalTransportConfigSync(cfg) {
 		changes: ["Migrated channels.signal transport settings to concrete account-owned transport objects."]
 	};
 }
+async function migrateLegacySignalTransportConfig(params) {
+	const prepared = prepareLegacySignalTransportMigration(params.cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries, legacyResolutionEntries } = prepared;
+	if (!params.detect && legacyResolutionEntries.some((entry) => requiresDetection(entry, signal, apiMode))) return {
+		config: params.cfg,
+		changes: [],
+		warnings: [PENDING_LEGACY_TRANSPORT_WARNING]
+	};
+	const resolvedTransports = await Promise.all(entries.map(async (entry, index) => !shouldMaterializeTransport(entries, index) ? void 0 : await resolveLegacyTransport({
+		entry,
+		parent: signal,
+		apiMode,
+		detect: params.detect
+	})));
+	return finishLegacySignalTransportMigration(params.cfg, entries, resolvedTransports);
+}
+function migrateLegacySignalTransportConfigSync(cfg) {
+	const prepared = prepareLegacySignalTransportMigration(cfg);
+	if ("config" in prepared) return prepared;
+	const { signal, apiMode, entries } = prepared;
+	return finishLegacySignalTransportMigration(cfg, entries, entries.map((entry, index) => {
+		if (!shouldMaterializeTransport(entries, index)) return;
+		return resolveLegacyTransportWithoutDetection({
+			entry,
+			parent: signal,
+			apiMode
+		});
+	}));
+}
 //#endregion
 //#region extensions/signal/config-doctor-api.ts
 const RETIRED_SIGNAL_ACCOUNT_TRANSPORT_FIELDS = [

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-C18u1hW0.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-api-D0SnglP4.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{monitor-D7Slr0-A.js → monitor-BiNWxMB3.js}

@@ -1,15 +1,15 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { l as normalizeSignalTransportHost } from "./transport-policy-DxvSMHp9.js";
 import { i as resolveSignalAccount, o as resolveSignalReplyToMode } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
 import { a as normalizeSignalAllowRecipient, c as resolveSignalSender, i as isSignalSenderAllowed, l as looksLikeUuid, n as formatSignalSenderDisplay, o as resolveSignalPeerId, r as formatSignalSenderId, s as resolveSignalRecipient, t as formatSignalPairingIdLine } from "./identity-YXPmgFMu.js";
-import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-BcDiypLn.js";
-import { t as SignalSseRejectionError } from "./client-BmpTN7R3.js";
-import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
-import { n as sendReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-D-nkbsvm.js";
-import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-CsVOpHg_.js";
-import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { c as resolveSignalReactionLevel, f as isSignalNativeApprovalHandlerConfigured, i as getOptionalSignalRuntime, l as formatSignalMediaText, n as registerSignalReplyContext, o as materializeSignalPresentationFallback } from "./transport-detection-Do2pYMAH.js";
+import { t as SignalSseRejectionError } from "./client-B3C0ciqU.js";
+import { n as signalRpcRequest, r as streamSignalEvents, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
+import { n as sendReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { i as maybeResolveSignalApprovalReaction, o as registerSignalApprovalReactionTargetForDeliveredPayload, s as resolveSignalApprovalConversationKey, t as addSignalApprovalReactionHintToStructuredPayload } from "./approval-reactions-CjhdkJ8P.js";
+import { r as registerSignalQuestionReactionTargetForDeliveredPayload, t as maybeResolveSignalQuestionReaction } from "./question-reactions-BFR9Mf-O.js";
+import { n as sendReadReceiptSignal, r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
 import { bindIngressLifecycleToReplyOptions, createChannelIngressError, createChannelIngressMonitor, createChannelMessageReplyPipeline, resolveChannelStreamingBlockEnabled } from "openclaw/plugin-sdk/channel-outbound";
 import { createChannelPairingChallengeIssuer } from "openclaw/plugin-sdk/channel-pairing";
 import { resolveAgentRoute, resolveInboundLastRouteSessionKey } from "openclaw/plugin-sdk/routing";
@@ -20,8 +20,8 @@ import { buildChannelInboundEventContext, buildMentionRegexes, createChannelInbo
 import { canonicalizeBase64, detectMime, estimateBase64DecodedBytes, kindFromMime, saveMediaBuffer } from "openclaw/plugin-sdk/media-runtime";
 import { collectErrorGraphCandidates, formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 import { ensurePortAvailable, extractErrorCode, formatErrorMessage as formatErrorMessage$1, resolvePinnedMainDmOwnerFromAllowlist } from "openclaw/plugin-sdk/security-runtime";
-import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import path from "node:path";
+import { resolveChannelGroupPolicy, resolveChannelGroupRequireMention, resolveChannelGroups, resolveChannelGroupsConfigPath } from "openclaw/plugin-sdk/channel-policy";
 import { registerChannelRuntimeContext } from "openclaw/plugin-sdk/channel-runtime-context";
 import { DEFAULT_GROUP_HISTORY_LIMIT, createChannelHistoryWindow } from "openclaw/plugin-sdk/reply-history";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
@@ -271,50 +271,30 @@ function createSignalNativeReplyIdPlan(params) {
 	const replyToId = resolveSignalNativeReplyId(params);
 	if (!replyToId) return {
 		peek: () => void 0,
-		use: () => void 0,
 		markSent: () => void 0
 	};
 	const isExplicitReply = params.payload.replyToTag === true || params.payload.replyToCurrent === true;
-	if (isSignalStatusNoticePayload(params.payload)) {
-		const resolve = params.replyToMode === "off" ? () => void 0 : () => replyToId;
-		return {
-			peek: resolve,
-			use: resolve,
-			markSent: () => void 0
-		};
-	}
-	if (isExplicitReply) {
-		const resolve = () => replyToId;
-		return {
-			peek: resolve,
-			use: resolve,
-			markSent: () => void 0
-		};
-	}
+	if (isSignalStatusNoticePayload(params.payload)) return {
+		peek: params.replyToMode === "off" ? () => void 0 : () => replyToId,
+		markSent: () => void 0
+	};
+	if (isExplicitReply) return {
+		peek: () => replyToId,
+		markSent: () => void 0
+	};
 	const planner = createReplyReferencePlanner({
 		replyToMode: params.replyToMode,
 		existingId: replyToId,
 		hasReplied: params.replyContext?.state?.hasReplied
 	});
-	const syncState = () => {
-		if (params.replyContext?.state) params.replyContext.state.hasReplied = planner.hasReplied();
-	};
 	return {
 		peek: () => planner.peek(),
-		use: () => {
-			const nextReplyToId = planner.use();
-			syncState();
-			return nextReplyToId;
-		},
 		markSent: () => {
 			planner.markSent();
-			syncState();
+			if (params.replyContext?.state) params.replyContext.state.hasReplied = planner.hasReplied();
 		}
 	};
 }
-function createSignalNativeReplyIdResolver(params) {
-	return createSignalNativeReplyIdPlan(params).use;
-}
 //#endregion
 //#region extensions/signal/src/monitor/access-policy.ts
 const SIGNAL_UUID_KIND = "plugin:signal-uuid";
@@ -1889,6 +1869,7 @@ async function deliverReplies(params) {
 		accountId,
 		chatType: params.chatType
 	});
+	const replyToAuthor = normalizeOptionalString(params.replyContext?.author);
 	for (const payload of replies) {
 		const deliveryResults = [];
 		const presentationPayload = materializeSignalPresentationFallback(payload);
@@ -1901,12 +1882,29 @@ async function deliverReplies(params) {
 			targetAuthorUuid: accountUuid
 		}) ?? presentationPayload;
 		const reply = resolveSendableOutboundReplyParts(deliveredPayload);
-		const nextNativeReply = createSignalNativeReplyResolver({
+		const replyPlan = createSignalNativeReplyIdPlan({
 			payload: deliveredPayload,
 			replyContext: params.replyContext,
 			replyToMode
 		});
-		const recordDeliveryResult = (result, visibleText) => {
+		const send = async (visibleText, mediaUrl) => {
+			const replyToId = replyPlan.peek();
+			const result = await sendMessageSignal(target, visibleText, {
+				cfg: params.cfg,
+				baseUrl,
+				account,
+				maxBytes,
+				accountId,
+				...mediaUrl ? { mediaUrl } : {},
+				...replyToId ? {
+					replyToId,
+					...replyToAuthor ? {
+						replyToAuthor,
+						replyToBody: params.replyContext?.body ?? ""
+					} : {}
+				} : {}
+			});
+			replyPlan.markSent();
 			const messageId = typeof result?.messageId === "string" && result.messageId.trim() ? result.messageId.trim() : null;
 			if (messageId) deliveryResults.push({
 				channel: "signal",
@@ -1918,28 +1916,8 @@ async function deliverReplies(params) {
 			payload: deliveredPayload,
 			text: reply.text,
 			chunkText: (value) => chunkTextWithMode(value, textLimit, chunkMode),
-			sendText: async (chunk) => {
-				recordDeliveryResult(await sendMessageSignal(target, chunk, {
-					cfg: params.cfg,
-					baseUrl,
-					account,
-					maxBytes,
-					accountId,
-					...nextNativeReply()
-				}), chunk);
-			},
-			sendMedia: async ({ mediaUrl, caption }) => {
-				const visibleText = caption ?? "";
-				recordDeliveryResult(await sendMessageSignal(target, visibleText, {
-					cfg: params.cfg,
-					baseUrl,
-					account,
-					mediaUrl,
-					maxBytes,
-					accountId,
-					...nextNativeReply()
-				}), visibleText);
-			}
+			sendText: send,
+			sendMedia: ({ mediaUrl, caption }) => send(caption ?? "", mediaUrl)
 		}) !== "empty") {
 			registerSignalReactionTargetsForDeliveredPayload({
 				cfg: params.cfg,
@@ -1957,21 +1935,6 @@ async function deliverReplies(params) {
 		}
 	}
 }
-function createSignalNativeReplyResolver(params) {
-	const nextReplyToId = createSignalNativeReplyIdResolver(params);
-	return () => {
-		const replyToId = nextReplyToId();
-		if (!replyToId) return {};
-		const replyToAuthor = normalizeOptionalString(params.replyContext?.author);
-		return {
-			replyToId,
-			...replyToAuthor ? {
-				replyToAuthor,
-				replyToBody: params.replyContext?.body ?? ""
-			} : {}
-		};
-	};
-}
 async function monitorSignalProvider(opts = {}) {
 	const runtime = opts.runtime ?? createNonExitingRuntime();
 	const cfg = opts.config ?? getRuntimeConfig();

package/dist/{probe-CtO2EIfg.js → probe-kOJqyjWz.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
-import { t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
-import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CDyW9LrQ.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
+import { t as detectSignalTransport } from "./transport-detection-Do2pYMAH.js";
+import { n as signalRpcRequest, t as signalCheck } from "./client-adapter-CNc5wzzs.js";
 import { runChannelProbe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
 //#region extensions/signal/src/probe.ts

package/dist/{question-reactions-CsVOpHg_.js → question-reactions-BFR9Mf-O.js}

@@ -1,6 +1,6 @@
-import { t as __exportAll } from "./rolldown-runtime-D7D4PA-g.js";
+import { t as __exportAll } from "./rolldown-runtime-8H4AJuhK.js";
 import { i as resolveSignalDeliveredConversationKey } from "./approval-auth-pNCKKotV.js";
-import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-D-nkbsvm.js";
+import { c as resolveSignalApprovalTargetAuthorKeys } from "./approval-reactions-CjhdkJ8P.js";
 import { createQuestionReactionTargetStore, questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
 //#region extensions/signal/src/question-reactions.ts

package/dist/{reaction-runtime-api-7FQFT_qb.js → reaction-runtime-api-CWqDv5-q.js}

@@ -1,6 +1,6 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 //#region extensions/signal/src/send-reactions.ts

package/dist/reaction-runtime-api.js

@@ -1,2 +1,2 @@
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 export { removeReactionSignal, sendReactionSignal };

package/dist/{rolldown-runtime-D7D4PA-g.js → rolldown-runtime-8H4AJuhK.js}

@@ -1,3 +1,4 @@
+import "node:module";
 //#region \0rolldown/runtime.js
 var __defProp = Object.defineProperty;
 var __exportAll = (all, no_symbols) => {

package/dist/runtime-api.js

@@ -1,12 +1,12 @@
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, t as looksLikeSignalTargetId } from "./normalize-l_b99hap.js";
-import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-BcDiypLn.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
-import { n as SignalConfigSchema } from "./config-schema-CHihQTOp.js";
-import { i as installSignalCli } from "./install-signal-cli-7tEL37_j.js";
-import { t as monitorSignalProvider } from "./monitor-D7Slr0-A.js";
-import { t as sendMessageSignal } from "./send-DuH2ntJt.js";
-import { t as probeSignal } from "./probe-CtO2EIfg.js";
+import { a as setSignalRuntime, c as resolveSignalReactionLevel, s as signalMessageActions } from "./transport-detection-Do2pYMAH.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
+import { n as SignalConfigSchema } from "./config-schema-DfEbpMVQ.js";
+import { i as installSignalCli } from "./install-signal-cli-QlEIfWBv.js";
+import { t as monitorSignalProvider } from "./monitor-BiNWxMB3.js";
+import { t as sendMessageSignal } from "./send-Bz0x0JC1.js";
+import { t as probeSignal } from "./probe-kOJqyjWz.js";
 import { resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/account-helpers";
 import { PAIRING_APPROVED_MESSAGE } from "openclaw/plugin-sdk/channel-status";
 import { buildBaseAccountStatusSnapshot, buildBaseChannelStatusSummary, collectStatusIssuesFromLastError, createDefaultChannelRuntimeState } from "openclaw/plugin-sdk/status-helpers";

package/dist/{send-DuH2ntJt.js → send-Bz0x0JC1.js}

@@ -1,7 +1,7 @@
 import { i as resolveSignalAccount } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget } from "./normalize-l_b99hap.js";
-import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-BcDiypLn.js";
-import { n as signalRpcRequest } from "./client-adapter-CDyW9LrQ.js";
+import { n as registerSignalReplyContext, u as markdownToSignalText } from "./transport-detection-Do2pYMAH.js";
+import { n as signalRpcRequest } from "./client-adapter-CNc5wzzs.js";
 import { t as resolveSignalRpcContext } from "./rpc-context-dXSy4NtF.js";
 import { createMessageReceiptFromOutboundResults } from "openclaw/plugin-sdk/channel-outbound";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";

package/dist/{send.runtime-BLiqhyHW.js → send.runtime-CeV1p7Sq.js}

@@ -1,2 +1,2 @@
-import { r as sendTypingSignal, t as sendMessageSignal } from "./send-DuH2ntJt.js";
+import { r as sendTypingSignal, t as sendMessageSignal } from "./send-Bz0x0JC1.js";
 export { sendMessageSignal, sendTypingSignal };

package/dist/{transport-detection-BcDiypLn.js → transport-detection-Do2pYMAH.js}

@@ -2,7 +2,7 @@ import { u as normalizeSignalTransportUrl } from "./transport-policy-DxvSMHp9.js
 import { i as resolveSignalAccount, n as listSignalAccountIds, r as resolveDefaultSignalAccountId, t as listEnabledSignalAccounts } from "./accounts-DO4HMqaK.js";
 import { n as normalizeSignalMessagingTarget, r as normalizeSignalReactionRecipient } from "./normalize-l_b99hap.js";
 import { n as signalApprovalAuth, t as getSignalApprovalApprovers } from "./approval-auth-pNCKKotV.js";
-import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-7FQFT_qb.js";
+import { n as sendReactionSignal, t as removeReactionSignal } from "./reaction-runtime-api-CWqDv5-q.js";
 import { DEFAULT_ACCOUNT_ID } from "openclaw/plugin-sdk/account-id";
 import { questionGatewayRuntime } from "openclaw/plugin-sdk/question-gateway-runtime";
 import { parseAgentSessionKey } from "openclaw/plugin-sdk/routing";
@@ -58,6 +58,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 		}).manualFallbackPayload }
 	},
 	createNativeRuntime: (routing) => createLazyChannelApprovalNativeRuntimeAdapter({
+		capabilityBoundary: true,
 		eventKinds: [
 			"exec",
 			"plugin",
@@ -73,7 +74,7 @@ const signalApproval = createApproverRestrictedNativeApprovalCapabilityFromForwa
 			approvalKind,
 			request
 		}),
-		load: async () => (await import("./approval-handler.runtime-Dsg_GE8N.js")).signalApprovalNativeRuntime
+		load: async () => (await import("./approval-handler.runtime-DCPJkIqo.js")).signalApprovalNativeRuntime
 	})
 });
 const signalApprovalRouting = signalApproval.routing;
@@ -522,7 +523,7 @@ const DEFAULT_PROBE_TIMEOUT_MS = 1e4;
 async function detectSignalTransport(params) {
 	const url = normalizeSignalTransportUrl(params.url);
 	const timeoutMs = params.timeoutMs ?? DEFAULT_PROBE_TIMEOUT_MS;
-	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-B7kr_6Zu.js");
+	const probes = params.probeNative && params.probeContainer ? void 0 : await import("./transport-probes.runtime-DV7x4VWu.js");
 	const probeNative = params.probeNative ?? probes?.nativeCheck;
 	const probeContainer = params.probeContainer ?? probes?.containerCheck;
 	if (!probeNative || !probeContainer) throw new Error("Signal transport probes are unavailable");

package/dist/{transport-detection.runtime-DYuvIa7s.js → transport-detection.runtime-QasZp3BE.js}

@@ -1,2 +1,2 @@
-import { t as detectSignalTransport } from "./transport-detection-BcDiypLn.js";
+import { t as detectSignalTransport } from "./transport-detection-Do2pYMAH.js";
 export { detectSignalTransport };

package/dist/{transport-probes.runtime-B7kr_6Zu.js → transport-probes.runtime-DV7x4VWu.js}

@@ -1,2 +1,2 @@
-import { a as containerCheck, n as signalCheck } from "./client-BmpTN7R3.js";
+import { a as containerCheck, n as signalCheck } from "./client-B3C0ciqU.js";
 export { containerCheck, signalCheck as nativeCheck };

package/openclaw.plugin.json

@@ -1,5 +1,8 @@
 {
   "id": "signal",
+  "categories": [
+    "channels"
+  ],
   "name": "Signal",
   "description": "OpenClaw Signal channel plugin.",
   "doctorContract": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/signal",
-  "version": "2026.9.2",
+  "version": "2026.9.4",
   "description": "OpenClaw Signal channel plugin",
   "type": "module",
   "dependencies": {
@@ -93,10 +93,10 @@
       "allowInvalidConfigRecovery": true
     },
     "compat": {
-      "pluginApi": ">=2026.9.2"
+      "pluginApi": ">=2026.9.4"
     },
     "build": {
-      "openclawVersion": "2026.9.2",
+      "openclawVersion": "2026.9.4",
       "bundledDist": false
     },
     "release": {
@@ -118,7 +118,7 @@
     "README.md"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.9.2"
+    "openclaw": ">=2026.9.4"
   },
   "peerDependenciesMeta": {
     "openclaw": {

package/dist/{install-signal-cli-7tEL37_j.js → install-signal-cli-QlEIfWBv.js}

@@ -1,10 +1,10 @@
 import { isRecord, normalizeLowercaseStringOrEmpty, normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import path from "node:path";
 import { CONFIG_DIR, extractArchive, resolveBrewExecutable } from "openclaw/plugin-sdk/setup-tools";
 import { createWriteStream } from "node:fs";
 import fs from "node:fs/promises";
-import path from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { readProviderJsonObjectResponse } from "openclaw/plugin-sdk/provider-http";